Method of authenticating a user

Inactive Publication Date: 2010-10-07
MEDISCS
View PDF18 Cites 17 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Benefits of technology

[0018]The object of the invention is to cope with the disadvantages of the state of the art by providing the authentication of the user in a secure and strong manner on the basis of his mobile phone.
[0019]Beside the high level of security, the protocol according to the invention simplifies the strong authentication of said user. In addition, it permits the electronic signature of data such as documents, electronic mail or the like.
[0031]Therefore, another advantage resides in that the invention permits both the identification and the authentication of the user on the basis of one single terminal, in particular a phone, yet limiting the number of connection and request dispatches, thus considerably reducing the security risks.

Problems solved by technology

One disadvantage resides in the complete absence of security at the level of the sms service.
A first disadvantage resides in the multiplication of the requests sent, increasing the underlying procedures and the costs related thereto.
One problem resides in that the secure protocols of either of said networks are different: WTLS and SSL.
In addition, there is absolutely no way to make sure that the connection is carried out on the original server, making it possible to mislead the user through a false server.
Other solutions have been considered, but they do not give full satisfaction.
In addition, there is no solution allowing the use of an electronic signature of documents after authentication.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method of authenticating a user
  • Method of authenticating a user

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0033]This invention allows a strong authentication of a user 1 wishing to connect in a secure manner to a remote service by means of a mobile terminal 2, in particular a cellular phone 2, whereas the utilization of the remote service itself occurs through a browser, in particular executed by means of another computer terminal 3, for example a computer.

[0034]One should distinguish, on the one hand, the computer terminal 3 through which the user 1 accesses said service and navigates and, on the other hand, the cellular phone 2 from which he is authenticated, said computer 3 and said phone 2 being different.

[0035]Furthermore, it should be noted that said service is hosted on a server 4, more specifically on a web server connected to a computer network such as the Internet. This service is accessible on-line through a portal.

[0036]In a known manner, said portal is displayed on any type of terminal through a browser. This terminal can be said computer 3 connected to said Internet networ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to a method for authenticating a user (1) on the basis of a mobile terminal of the cellular phone type (2), in which said user (1) views through a browser a portal for accessing a service hosted on a server (4); said user (1) requests his authentication through the browser via said portal; said portal initiates a pre-session in such a way as to display, through said browser, temporary access data (5) independent from said user (1); said user (1) inputs into his telephone (2) the data viewed; said telephone (2) automatically dispatches a request (6) to said server (4), including at least one authentication certificate (7) specific to the user (1) and said viewed data (5); said request (6) is encrypted with the aid of the public key of a certificate (8) of said server (4) and, in the event of authentication of the user (1), access to the service is authorized through a secure session in the browser.

Description

BACKGROUND OF THE INVENTION[0001](1) Field of the Invention[0002]This invention is related to the field of authenticating a user on the basis of a terminal, in particular on the basis of a cellular phone.[0003]The invention relates more specifically to a method for the strong authentication of a user on the basis of a terminal of the cellular phone type.[0004]This invention will find a specific application within the framework of the request for a remote and secure access by a user, from a mobile phone, to a service hosted on a server, in particular through a portal displayed through a browser.[0005]It falls within the framework of a connection through a computer and telecommunication network of the Internet type, in particular through <<WAP>> (standing for <<Wireless Application Protocol>>). WAP is a communication network the purpose of which is to allow access to the Internet with the help of a mobile terminal, such as a cellular phone, a PDA or the like.[0...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L9/32
CPCG06F21/35G06F21/43H04L63/0442H04W12/06H04L63/0853H04L63/126H04L63/18H04L63/0823H04W12/069
InventorLECLERCQ, ALAINARNAIL, YVESDELBOURG, BERNARD
OwnerMEDISCS